If you don't have access to any Kerberos infrastructure you can use the one from Fedora if you have a FAS account: # cat > /etc/krb5.conf.d/fedoraproject >> EOF [realms] FEDORAPROJECT.ORG = { kdc = https://id.fedoraproject.org/KdcProxy } [domain_realm] .fedoraproject.org = FEDORAPROJECT.ORG fedoraproject.org = FEDORAPROJECT.ORG EOF $ kinit <user>@FEDORAPROJECT.ORG $ klist In firefox you have to set in about:config network.negotiate-auth.delegation-uris -> .fedoraproject.org network.negotiate-auth.trusted-uris -> .fedoraproject.org If you have a ticket, e.g. visit https://bodhi.fedoraproject.org/